6176fb76e661ae5d7739dbe692b75b9157dbb98db096fd4cf3ebc57bb129f810

Analysis

user interaction
yes
max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 37KB
Sample261102-s792aaxt8q
SHA256 6176fb76e661ae5d7739dbe692b75b9157dbb98db096fd4cf3ebc57bb129f810
MD5 8f6b3e0a013134f75916e74e1de3b613
SHA1 1cc5a287ab1cf4d6802f451614c2568aa9663221
SHA512 4b3de6081f523b6152f726e7ee7ad6aa31b252e11d6ae620aafe85a1c6fb0b0c5cb9783ec3f15a07d86c98749052c502dd33482b2ac673e099801ef3dfa421b5
SSDEEP 384:nXK6ROF1atksh4hk9aix77XrDhmokNcx8jIpzxtsw8hlotzLRHDvBBO6rDYDghNb:HO1aumv77XrDhFkNlofHrrDFhpkty
TLSH
T1E2037233E2C1593A003341C6DB6453A9FB675207EA094118FABD136B2FB6F65FC23999
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1004	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{20283177-9689-49F5-B303-93AD57605D41}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5836	msedge.exe
5836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe
1340	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1340 wrote to memory of 5984	1340	msedge.exe	88
PID 1340 wrote to memory of 1004	1340	msedge.exe	90
PID 1340 wrote to memory of 1900	1340	msedge.exe	91
PID 1340 wrote to memory of 1900	1340	msedge.exe	91
PID 1340 wrote to memory of 5204	1340	msedge.exe	92
PID 1340 wrote to memory of 5204	1340	msedge.exe	92
PID 1340 wrote to memory of 5204	1340	msedge.exe	92
PID 1340 wrote to memory of 4208	1340	msedge.exe	93
PID 1340 wrote to memory of 4208	1340	msedge.exe	93
PID 1340 wrote to memory of 4208	1340	msedge.exe	93
PID 1340 wrote to memory of 4892	1340	msedge.exe	94
PID 1340 wrote to memory of 4892	1340	msedge.exe	94
PID 1340 wrote to memory of 4892	1340	msedge.exe	94
PID 1340 wrote to memory of 4568	1340	msedge.exe	96
PID 1340 wrote to memory of 4324	1340	msedge.exe	97
PID 1340 wrote to memory of 4568	1340	msedge.exe	96
PID 1340 wrote to memory of 4568	1340	msedge.exe	96
PID 1340 wrote to memory of 4324	1340	msedge.exe	97
PID 1340 wrote to memory of 4324	1340	msedge.exe	97
PID 1340 wrote to memory of 5484	1340	msedge.exe	99
PID 1340 wrote to memory of 5484	1340	msedge.exe	99
PID 1340 wrote to memory of 2384	1340	msedge.exe	100
PID 1340 wrote to memory of 2384	1340	msedge.exe	100
PID 1340 wrote to memory of 3892	1340	msedge.exe	102
PID 1340 wrote to memory of 5852	1340	msedge.exe	106
PID 1340 wrote to memory of 3912	1340	msedge.exe	107
PID 1340 wrote to memory of 5244	1340	msedge.exe	108
PID 1340 wrote to memory of 4936	1340	msedge.exe	109
PID 1340 wrote to memory of 4936	1340	msedge.exe	109
PID 1340 wrote to memory of 5836	1340	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff83210c188,0x7ff83210c194,0x7ff83210c1a0
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,8304876863704869484,2803052514142429252,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,5913196178624539763,1757882993855424292,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:13
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,8079940014111780069,14619467395348190780,262144 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:2
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,2054335087331479659,12032580148829520308,2097152 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,589131260006112861,7768338915173662638,2097152 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4368,i,2667311700758869937,10293893123175706140,2097152 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,12236264407654687250,1317423969747228385,2097152 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,8900215315932401228,2642474805633389640,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,4312243713669889376,15254639785322097494,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,8493620991905790765,12386752984493450315,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,8493620991905790765,12386752984493450315,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:14
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,1547859543622041487,1805374089172524708,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,12470239371338576691,6942851863340404416,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,2555135396240762737,8817432895977406642,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,1803879735529585247,6607416069255112595,524288 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:14
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6628,i,3869436584921085558,3667486976352954392,262144 --field-trial-handle=2396,i,10456337574221784557,7964552990877934936,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

07cfa2af-d7b6-45e8-af49-6d50a5dacee4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\07cfa2af-d7b6-45e8-af49-6d50a5dacee4.tmp
Size 38KB
SHA256 7d780a06b5a4189bca62194e334730fbb78c0fcde5b6712e3c1b2a3c413955c1
MD5 4e9477536b3470b6bc89bf4b7b849434
SHA1 ad332dc1e69a23888082c74549a8646213bda5bd
SHA512 966cf9ecc192de5206a82dca631be02d7c2f9a9d023ce8195cd1a097728ce655e8b0ebf937aa957f0f1ef3db1a4ad21601a927cc5ba23d7dae7cd175d0d86781
SSDEEP 768:f/UxvxjgC+k32Y94OjMQF/9OA9at01j0iq00+IaimsW:yZj3+k32YqrCHq00NaFsW
TLSH
T1D103BF71ACA5AD33ADF2B384760A6397DFF80523C5CA6E9049ED2E0D05477AD1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c66decf-a423-4eac-9fa2-d4629cc8c985.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1c66decf-a423-4eac-9fa2-d4629cc8c985.tmp
Size 38KB
SHA256 99e0d4463f26145a958b33c65de354a074cae8fadc5cea945a1d0644f1f8be35
MD5 9065ff724d13c6803f4c298556762324
SHA1 b38e00324cdd61d41ccd445bf028676bcbaab2d1
SHA512 36d694c7ffd3a50daacd9cc2fe2319d6865fba9bc798318ea322cf9c77b8af491924313d35b3adc21a85c2ca76b45298b99fece605e800d6e09573c569bbe3c4
SSDEEP 768:A/UxvxjgC+H3nOqOjMQ1/9OA9at01j0iq00+IaXmSHxRz:tZj3+H3nLlCHq00NaWSTz
TLSH
T15A03C031ECA59D73ADF2B384760A6387DFF40653C6CA6A9049ED2D0D05876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

463a214f-8f7c-43a8-b8e1-0193816d10fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\463a214f-8f7c-43a8-b8e1-0193816d10fa.tmp
Size 34KB
SHA256 ad8a09594d76249d7d5e4c866ed891aefee02b7459f9f8c5c3eed23c8646a400
MD5 ecb14a1866815722eea371e2b63e8eb5
SHA1 25bcec6ce2f5436d946cabc9e17908633faf862d
SHA512 c4eb426a0e870f3177bf2c739fd82b12e9e74768ab266dd0998ce332affd79c86157fab0b7479c3ca7d82947d9d49f73b006b7d8cc4e31650b33c6239af73619
SSDEEP 768:dQ3TY74OjMQF/9OA9at01j0iq00+IaimE75EfLa:dQ3TYsrCHq00NaFkAW
TLSH
T178F2B071ECE19E735DE2A784B6093397AFE44617C5CE5A80C9DE290D0447AEE230BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6dd57d18-10ab-445f-b9fe-1dd429a96a25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6dd57d18-10ab-445f-b9fe-1dd429a96a25.tmp
Size 37KB
SHA256 c618c6f4ee08e49edecccce27b3e2fae9e45216f53fc546bd1e067833c41adc5
MD5 94a228cd7f5d413cc3ebec7ef89b6da2
SHA1 6e686f9de9a8b619eee85e7921edbe22ec386fdd
SHA512 2e0c43a12dbef04d9d328b2ecf5d14b1b001c7e3693b6e213273f2c5ad4717ee30c7cd44e6608ae71e38d69ba7d390687c974b67515267d722e86dde0b3e6b09
SSDEEP 768:X/UxvxjgC+H3YqSOjM4/9OA9at01j0iq00+Ia2KSHxRz:KZj3+H3YHBCHq00NahSTz
TLSH
T1AD03C031ECA19D739CF7B384770A63979EF40663C5CA6A9049ED2E0E05876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e812fcc-8944-48f5-aa87-2a00d5a97bf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e812fcc-8944-48f5-aa87-2a00d5a97bf0.tmp
Size 36KB
SHA256 94dac99506a669f3e6e9029467101b8f7fcbb55cae3376aba898e1538e62bc1c
MD5 871855a74f1325d22fe8f15e1169ae9b
SHA1 808dc1f3c774f8fcb8ecb427b6035db4df358dce
SHA512 98631392310fb92e3b04cae4b39beceb2b79e1d5897e937dcc372443f27d6667e8dcb621d5d0aba34ff1c6089a09ce26bc23ab4e093f02947668c781acde29c2
SSDEEP 768:1Fdn3MwgqY74OjMQB/9OA9at01j0iq00+IaimE75EfLa:xn3tYsZCHq00NaFkAW
TLSH
T10DF2AE72ACD0DA77ADF2AB84B6093397DEF44257C5CA9A90CADE190D00475DE230BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52895c20-fec2-489e-9ba4-f9f74c9cc36d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\52895c20-fec2-489e-9ba4-f9f74c9cc36d.tmp
Size 105KB
SHA256 2ef96264d2b79f2f32ba7c3f4d8bc3a7cd12206153f6218f7bbe1251f2de650f
MD5 1ad9f96c1fcd1af763818d9e108bb5f4
SHA1 1e2816ec93f878922501ab302f5c8c4e7ebcd07d
SHA512 e00a04412dedd2975b5ca272c9660f6c9931bacff5f3a31e6eda9d9dbf0a5b61954f0ec88458dfe5f52a32f35c3785be60c678cc8a35853099cfde0c58ccdbe9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T1EFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

35e42017-cc5b-42a5-b7c0-8e080a3d4895.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35e42017-cc5b-42a5-b7c0-8e080a3d4895.tmp
Size 11KB
SHA256 dae3a3b340338139269151bf184a489036a8718325272bd1b8262145e7cc8f35
MD5 9977ed6f38257419e53527333490d07d
SHA1 a8c8c1f4b1d2feca5ffe077412498a5e05e7636c
SHA512 4d128bdffc3fe24cea36a675ee325433b0e3d9774a2fed453885a5cf0601a27469c453b6b65ec84713d4955d2a3195c7c202a46b6ab2950e60c12980fecaf0a4
SSDEEP 192:sxRWRebg/fns4VzoA8p4e/g6+WNIYo9e0G0wIgDiJ:sxRWCg/fns44//5IHM6
TLSH
T187329555AE68B93B9CCBD21DBF55BF53D2FD103260911E48AAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb0768c-1976-4aae-a604-603d6cb8b4b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6eb0768c-1976-4aae-a604-603d6cb8b4b2.tmp
Size 10KB
SHA256 ece689b307c65c8fd726c9eddde52dc3a41b55931671b0dd18e785ca4424cb0d
MD5 f5bfa429ea52a1a6a0e79dc0e559ba2d
SHA1 ad1f5e9aff5aa03d6b9ba8be9e8a9c2d53613bc4
SHA512 dee92e9ebda8a191455f5aed4622cf18e3222f485414e4161ed6b3c7d2f66ddb6f165ea37857b6d29c5befe9c1e7aa77e795481407befde712665d5dec4e4e37
SSDEEP 192:sxRWRebg/fnsxVzoA8p4e/g6+WNIYodi0G0wIgDAJ:sxRWCg/fnsx4//5I/Mw
TLSH
T126328515AE68B93B9CCBD21DBF55BF53D2FD103261911E48AAFC951C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8332850a-d289-4ac6-9181-8dc74b13269b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8332850a-d289-4ac6-9181-8dc74b13269b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8bd12acf-19be-4e2c-a684-9d9563f31ac6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8bd12acf-19be-4e2c-a684-9d9563f31ac6.tmp
Size 23KB
SHA256 6decb5bbb6af8c13d6caa8cce00c80219f3c7b0f60564467187739d906496c92
MD5 d4e1e90d361d255d749681feca5349d3
SHA1 51a3ea3dc05064e3c7495b013ff762f63ba988db
SHA512 9d76be0190c84753050f6c52a3e1f00109aacf0a576955511d313beb76657a3fb8132c17ce6453edb498aa04c3f50d1b91249be56431f0f3ee6d7cd707d9cc15
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUprond2:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0V3
TLSH
T154B2EA2B744DCB7F4FC04A9D9C196FDB6D9802C796588D8047FAD84C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 36ed29cfba678a304eb5d0db57a5448f91d820b69e045f13b94088785af7e843
MD5 31e82c4a443e927515974d9cd510ac08
SHA1 9a59aac9083438e647b1a24100150d9c543fac7f
SHA512 4e0f1c99a0f168dff546e6fd2b7282827bc33c91fb74ddb89952621d5b2acc86521e069d36064fd4582cc50c507ad03d7979aba8e458c216fc3cc1b8cfe3cdaf
TLSH
T12A51290592AC8076F39A033296F2DD8337F03D81BDB33F7221C8DDB4AA41B610881A70
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ccce507e7c3417c53756a0b4869835ea8ba041070c1a483ad3f2c1d1853486ab
MD5 e49af2adce44f2c4031012bbc07017d7
SHA1 7819db74c568992eb335bce3e42fc9fa7bcd2557
SHA512 dcb68ffe3f6376c2ec9b865343d847026db24b8f743da2776d497bd9779e29aefa651d8d724d37a2e70537a83efb0e4679c6eb3c7753b3d9d556beacfafbd6f5
TLSH
T19551290596AC8076F39A037296F2DE8737F07D817DB33F7221C8CDB4AA41B610881A70
MD5 SHA1 SHA512 TLSH

Submit Download

99693533-a116-4767-a679-08be4f29b973.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\99693533-a116-4767-a679-08be4f29b973.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

95cf33ee-4647-4ae3-8636-2f85eef894e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\95cf33ee-4647-4ae3-8636-2f85eef894e7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b63b12d2-4111-4867-8ca7-f41bf3095b6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b63b12d2-4111-4867-8ca7-f41bf3095b6e.tmp
Size 2KB
SHA256 c4191b652f2dc7cc45e19c8ad06cf8976e7b9afe62c8262226dc21748a7b7c16
MD5 9c982aa68c5648a4f09ffd8ac453bb2a
SHA1 c69c4a001803f5f6f1e72dd093b63a33f44299ef
SHA512 e16e89c940a1a66276a1f82c157405edf2ab1315b191fcaebbffabb700e9b8c915a12a19a289fe65ce2eaa868c517b4b5c579b18ccce8fa0296f60701ece0f4d
TLSH
T1A741E1F783F4867E8A0191F0AA14AE1FCE1C0116432C7C66C9E0AE1793F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

efa8610c-47a3-4888-87c4-0e51bd09a750.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\efa8610c-47a3-4888-87c4-0e51bd09a750.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 69dbefa4846a48f77b2d10eeadbc185ac74c341c758b15d76f8ad2f5a7e8b818
MD5 88e575ec9f3b2f05744efe41f2b2dc9c
SHA1 bad4d0cf8bd13f5042f2ca9f31a5dc8f57df1c2e
SHA512 b14e2820791580d76db9b3827779b6bb352492aab9d31469a326f1f7eb9df267360953606bb729c8022a39beaefb4e9a8b7835dd7518caa9495042b7d67318bd
SSDEEP 96:Kc0gKZ6SYrSP7lx1gR5kzjjgK71j9g/zjUd7OoK7qeN:i3nmrN
TLSH
T14C914F11312F2242397D381C51E4AA6B029635B33039E66F3BBA88A14E77E150EFCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

beced991-abf2-492c-ab2a-70de76ade7e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\beced991-abf2-492c-ab2a-70de76ade7e2.tmp
Size 10KB
SHA256 0118c3a195af5bfcf52dc5455f225872b5dde689cae8b989944136e6d76389e6
MD5 b1c76f02f4a8e1b3b80d1b7179563825
SHA1 d18c7649ed55c22005e7c8fda2452d559cb81156
SHA512 bfdc2362087fc622537ac9f37af02bad8902c93b1b259863796e05650baa19dbba1d38e8e86aecee77b8f12bc0abb8a9d025c3aa3d9857a68abf1e86feae0d72
SSDEEP 192:sxRtRebg/fnsIVzoA8p4e/g6+WNIYodi0G0wIgIJ:sxRtCg/fnsI4//5I/Ms
TLSH
T1973285156E68B93B9CCBD21DBE65BF53D2FD1032A1912E48BAFC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c21fde05-e031-41a2-b5ee-ca64fd90c46b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c21fde05-e031-41a2-b5ee-ca64fd90c46b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b7ac9ce-e852-4014-95a3-6657af592b54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6b7ac9ce-e852-4014-95a3-6657af592b54.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5fb9dad-9e27-418e-9196-94443eda65f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5fb9dad-9e27-418e-9196-94443eda65f5.tmp
Size 34KB
SHA256 7a2319a1f9ccdb8a8bdcef65b45f917a97003ab72405846813182c41ca99a2ad
MD5 b6217a6a360ac17460517e14487ad7b2
SHA1 faf13d75127fa89fb6eaa81812636b7348b3c799
SHA512 8181c480e8cf8079fb6590e6a423cb58dcbdf4031cf0ec7fedc578097ae3987f322f669f3067df2f0e3fb8f3e08b0b7cb34efc5a9be0a261141ec4177d6f962d
SSDEEP 768:YQ38Y74OjMQF/9OA9at01j0iq00+IaimE75EfLa:YQ38YsrCHq00NaFkAW
TLSH
T1FAF2B071ECE19E735DE2A784B6093397AFE44617C5CE5A80C9DE290D0447AEE230BC76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd645f3b-9e47-4b11-aa53-1c4a5ddb807f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cd645f3b-9e47-4b11-aa53-1c4a5ddb807f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download